Alerts

The Alerts pane displays all types of alerts generated for events pertaining to device provisioning, configuration, and user management.

Viewing the Alerts Summary

To view a summary of alerts and acknowledge alerts, complete the following steps:

• In the Network Operations app, use the filter bar to select a group, device, site, or label.

1. Under Analyze, click Alerts & Events to view the alert and events dashboard. The Alerts & Events dashboard offers a graphical view, list view, and a configuration view.

   Click the summary icon to view the graphs displaying alerts and events. Select each tab, All, Access Point, Switch, or Controllerto view the graphs pertaining to each device type. To view the list of alerts, click the list icon.
   By default, the Alerts tab is selected and the Open Alerts table is displayed. The table displays all the generated alerts. The Alerts bar categorizes the alerts as Critical, Major, Minor, and Warning.

   Table 1: Alerts pane

   Data Pane Content	Description
   Occurred On	Displays the timestamp of the alert. Use the sort option to sort the events by date and time.
   Category	Displays the category of the alert. Use the filter option to filter the alert by category.
   Label	Displays the label name of the alert.
   Site	Displays the site name of the alert.
   Group	Displays the group name of the alert.
   Severity	Displays the severity level of the alert. The severity can be Critical, Major, Minor, or Warning.
   Description	Displays a description of the alert. Use the search option in filter bar to filter the alert based on description.

2. Optionally, click Acknowledge All to acknowledge all the alerts at once.
   • Important Points:

   Once an alert is acknowledged, the alert is moved to the Acknowledged tab.

   All Acknowledged Alerts can be viewed when the Show Acknowledged Alerts button is ON.

   If the user does not acknowledge an alert, the alert is suppressed for 5 minutes. The alert notification is then sent to the user every 5 minutes in case the issue still persists.

   If the user acknowledges an alert, the alert is suppressed until the issue is resolved. After resolving the issue, if it re-occurs the alert is sent again.

3. Optionally, enable the Show Acknowledged Alerts button to display the list of acknowledged alerts.

Viewing the Events Summary

To view the list of Events tab to view all the generated events.

Table 2: Events pane

Data Pane Content	Description
Occurred On	Displays the timestamp of the event. Use the sort option to sort the events by date and time. Use the filter option to select a specific time range to display the events.
Device Type	Displays the type of the device, Access Point, Gateway, Controller, Switch.
Host Name	Displays the host name of the device where the event is generated.
Device MAC	Displays the MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address of the device.
Client MAC	Displays the MAC address of the device to which the client is connected.
BSSID	Displays the BSSIDBasic Service Set Identifier. The BSSID identifies a particular BSS within an area. In infrastructure BSS networks, the BSSID is the MAC address of the AP. In independent BSS or ad hoc networks, the BSSID is generated randomly. of the device.
Event Type	Displays the type of the event.
Description	Displays the description of the event. Use the column filter to filter an event based on the description.

1. Optionally, in order to filter the events based on event types, click Click here for advanced filtering bar. The alert and the event types are displayed. Select the alert and the event type you want to display on the dashboard and click Filter.

   In the Events table, click to download the global events list to your local browser in the CSVComma-Separated Values. A file format that stores tabular data in the plain text format separated by commas. format.

   To customize the Alerts & Events table, click and select the required columns, or set the table to the default columns.

Configuring Alerts

To configure alerts and events, click the configuration icon and complete the following steps:

1. In the Network Operations app, use the filter bar to select a group, device, site, or label.
2. Under Analyze, click Alerts & Events. The Alerts & Events page is displayed.
3. In the Alerts & Events page, click . The Alert Severities & Notifications is displayed.
4. Use the tabs to navigate between the alert categories. Select an alert and click + to enable the alert with default settings. To configure alert parameters, click on the alert tile and do the following:
   1. Severity—Set the severity. The available options are Critical, Major, Minor, and Warning. By default, the following alerts are enabled and the severity is Major:
      • Virtual Controller Disconnected
      • Rogue AP Detected
      • New User Account Added
      • Switch Detected
      • Switch Disconnected

   For a few alerts, you can configure threshold value for one or more alert severities. Enter a value in the exceeds text box to set a threshold value for the alerts. The alert is triggered when one of the threshold values exceed the duration.

   2. Duration—Enter the duration in minutes.
   3. Device Filter Options—(Optional) You can restrict the scope of an alert by setting one or more of the following parameters:
      • Group—Select a group to limit the alert to a specific group.
      • Label—Select a label to limit the alert to a specific label.
      • Device—Select a device to limit the alert to a specific device.
      • Sites—Select a site to limit the alert to a specific site.
   4. Notification Options
      • Email—Select the Email check box and enter an email address to receive notifications when an alert is generated. You can enter multiple email addresses, separate each value with a comma.
      • Webhook—Select the Webhook check box and select the Webhook from the drop-down list.
      • Syslog—Select the Syslog checkbox to receive the syslog notifications when an alert is generated.
      • Click Save.
   5. Add Rule—(Optional) For a few alerts, the Add Rule option appears. For such alerts, you can add additional rule(s). The rule summaries appear at the top of the page.

   You can use the Search box, to search for alerts using keywords.

Viewing Enabled Alerts

To view alerts that you have enabled:

1. In the Network Operations app, use the filter bar to select a group, device, site, or label.
2. Under Analyze, click Alerts & Events. The Alerts & Events page is displayed.
3. In the Alerts & Events page, click . The Alert Severities & Notifications is displayed.
4. In the Alert Severities & Notifications page, click Enabled. Use the tabs to navigate between the alert categories. The alerts enabled for each category are displayed in the respective tabs.